devopsy.kinsta.cloud

Author: devopsy.kinsta.cloud

  • RiskSense Partners with WhiteHat Security for App Security Risk Management

    Integration Enables Organizations to Automate Business Impact Assessment of Web Vulnerabilities, Prioritize Remediation and Shorten Exploit Window

    SUNNYVALE , Calif. – April 3, 2018 – RiskSense®, Inc., the pioneer in Intelligent threat and vulnerability  management, today announced it has partnered with WhiteHat Security to automate web application security risk assessment, scoring and management. The integration of the RiskSense platform and WhiteHat Sentinel Dynamic enables organizations to continuously identify vulnerabilities and correlate them with external threat data to assess their business criticality and prioritize remediation.

    “Reliable detection, monitoring, and analysis of web applications composed of multiple programming languages, frameworks, APIs, and application types is difficult without automation,” said Srinivas Mukkamala, co-founder and CEO for RiskSense. “The integration of WhiteHat with the RiskSense platform combines WhiteHat’s industry-leading application security testing capabilities with our ability to score threats based on their business risk so organizations can collaborate and address the most critical problems before they can be exploited.”

    “For years, WhiteHat has been reporting on application vulnerabilities and remediation rates in our annual stats report, and for years, these rates have remained too high,” said Craig Hinkley, CEO of WhiteHat Security. “Close to 50 percent of applications remain vulnerable on every single day of the year, and remediation rates range from an average of 129 days to 196 days. With this integration between our platform, which provides the highest level of accuracy in the industry, and the RiskSense platform, which offers the most advanced and scalable solution for correlating and analyzing threat data, we’re able to deliver more comprehensive intelligence about threats and support faster remediation decision-making.”

    The RiskSense platform transforms cyber security risk management into a pro-active, collaborative and real-time discipline. It uses machine learning algorithms to contextualize internal intelligence gathered from security systems with external threat data sources to identify imminent cyber risks and assess their business criticality to prioritize remediation actions for physical and virtual assets. The integration with WhiteHat Sentinel Dynamic enables RiskSense to continuously consume outputs on web application vulnerabilities from dynamic application security testing (DAST) scans to assess and risk-score threats, and prioritize those that need immediate attention.

    WhiteHat Sentinel Dynamic is part of the WhiteHat Application Security Platform, a Software-as-a-Service platform that provides the full complement of application security services for DevSecOps. Sentinel Dynamic continuously scans websites as they evolve, providing automatic detection and assessment of code changes and alerting for newly discovered vulnerabilities. WhiteHat’s Threat Research Centervalidates every vulnerability, virtually eliminating false positives, so users can focus on remediation and improving the overall security posture of their organization.

     About WhiteHat Security

    WhiteHat Security has been in the business of securing applications for over 15 years. In that time, we’ve seen applications evolve and become the driving force of the digital business, but they’ve also remained the primary target of malicious hacks. The WhiteHat Application Security Platform is a cloud service that allows organizations to bridge the gap between security and development to deliver secure applications at the speed of business. This innovative platform is one of the reasons why WhiteHat has won numerous awards and been positioned by Gartner as a Leader in application security testing four times in row.  The company is headquartered in Santa Clara, Calif., with regional offices across the U.S. and Europe. For more information on WhiteHat Security, please visit www.whitehatsec.com, and follow us on Twitter,LinkedIn and Facebook.

    About RiskSense

    RiskSense®, Inc. is the pioneer in intelligent threat and vulnerability management. The company provides enterprises and governments clear visibility into their entire attack surface, including attack susceptibility and validation, as well as quantification of risks based on operational data.

    The RiskSense Software-as-a-Service (SaaS) platform unifies and contextualizes internal security intelligence, external threat data and business criticality to transform your cyber risk management into a more proactive, collaborative, and real-time discipline. It embodies hands-on expertise gained from defending critical government and commercial networks from the world’s most dangerous cyber adversaries.

    By leveraging RiskSense threat and vulnerability management solutions, organizations can significantly shorten time-to-remediation, increase operational efficiency, strengthen their security programs, heighten response readiness, reduce costs, and ultimately reduce the attack surface and minimize cyber risks. For more information, please visit www.risksense.com or follow us on Twitter at @RiskSense.

  • JFrog Brings the First Kubernetes Registry with Helm, Docker, npm, and Universal Repository to the AWS Marketplace

    DevOps technology leader, JFrog now delivers higher quality software, faster to AWS Marketplace customers through SaaS offering

    SUNNYVALE, California, April 5, 2018 – DevOps technology leader, JFrog, brings the first Kubernetes registry with Helm, Docker, and universal repository to the Amazon Web Services Marketplace. In addition to its universal repository that supports all major packages such as Maven, RubyGems, npm, NuGet, PyPI, and more (in all 20+ package types), Artifactory supports Helm, which is the package manager for Kubernetes applications. Kubernetes is the leading orchestration tool for automating deployment, scaling, and management of microservices and containerized applications.

    AWS customers can now immediately realize the benefits of JFrog Artifactory Cloud to deliver reliable, higher quality software faster and without any additional procurement steps. The offering includes a universal repository with automated artifact management, integration with leading CI servers, checksum-based storage, repository replication, and more, plus training and support, providing customers a seamless experience. JFrog Artifactory Cloud is delivered as an AWS Marketplace SaaS offering with zero operational overhead for customers.

    “DevOps is all about releasing fast to get to market faster. With the AWS Marketplace, we make it easy to start and scale our customers’ Artifactory environment. Now we can deliver our existing, highly reliable, and scalable SaaS service to our customers on AWS and have it show up on one bill. It is a win-win-win proposition,” says Kit Merker, VP Business Development at JFrog. “JFrog has been an essential part of the container movement from its early days. We believe that providing a world class Kubernetes Registry that holds all of the critical application components, in addition to the Docker containers, is critical for our customers.”

    The JFrog Artifactory Cloud offering extends the already available hybrid and multicloud offerings JFrog provides to its customers on AWS, GCP, and Azure, with full freedom of choice and a completely elastic model.

    To learn more, visit JFrog Artifactory Cloud on the AWS Marketplace.

    About

    With more than 4,000 customers and over 2 billion downloads per month on its universal binaries hub, JFrog is the leading universal solution for the management and distribution of software binaries. JFrog’s four products, JFrog Artifactory, the Universal Artifact Repository; JFrog Bintray, the Universal Distribution Platform; JFrog Mission Control, for Universal DevOps Flow Management; and JFrog Xray, Universal Component Analyzer, are used by Dev and DevOps engineers worldwide and are available as open-source, on-premise, and SaaS cloud solutions. Customers include some of the world’s top brands, such as Amazon, Google, Facebook, Uber, Netflix, Twitter, Adobe, VMware, Slack, and Spotify. The company is privately held and operated from California, Seattle, Israel, India, Spain, China, and France. More information can be found at jfrog.com.

  • DORA and Google Cloud to Collaborate on DevOps Research

    Today we’re excited to announce a new research project between DevOps Research and Assessment (DORA) and Google Cloud: The Accelerate State of DevOps Report. Together, DORA and Google Cloud will conduct original, in-depth research to understand what issues matter most to developers. We aim to unlock new findings that give our customers a clear path forward with guidance to improve resource management, productivity and quality of their IT teams.

    DORA’s mission is to transform the industry by instituting a scientific approach to software development, product management, and organizational transformation. We use rigorous data-driven research methodologies to create high-impact evidence-based tools that help companies understand how to fundamentally transform their practice. We further refine those methods by working with companies that are as passionate about high performance as we are.

    “Our customers migrate to the cloud to change how they approach IT- how they write software, how they operate their businesses and how they differentiate. They’re in the business of transformation,” said Sam Ramji, VP of Product Management, Google Cloud. “DORA’s rigor and experience in conducting this type of research will help give all cloud users a roadmap for transforming their organizations.”

    The team at DORA — Dr. Nicole Forsgren, Jez Humble, and Gene Kim — is committed to helping organizations understand their unique strengths and opportunities by identifying areas to focus resources in order to improve performance. What makes DORA unique is that we’ve each spent years researching what high performance means in the context of software in any organization, and discovering the factors that predict it. Our commitment to scientific rigor has allowed us to show the technology industry how to drive software and organizational excellence through continuous delivery, security, process, and culture. DORA is excited to continue this conversation with the community and our newest addition, Google.

    Google has also transformed the industry through its commitment to openness and knowledge sharing, demonstrated by projects like Kubernetes and TensorFlow, tools that help organizations radically transform their approach to software and business itself. Beyond tools, Google is also looking at other factors that drive IT transformation and openly sharing their research findings. We’re excited to collaborate with Google toward reaching deeper understandings of broader industry trends than we’ve been able to achieve to date.

    Finally, as part of this change, today we’re also announcing the conclusion of our research partnership with Puppet Inc. We’re thankful for the opportunity to have worked with the Puppet team and for the research we’ve created to date. Puppet’s commitment to excellence in the IT industry is characteristic of its groundbreaking work in the DevOps space, and we’re grateful for the opportunity to have collaborated with the company.

    DORA will continue its own research to further guide leaders in their transformation initiatives, and you can expect to see new surveys and industry reports from us in the near future, with even broader reach. If you’d like to help us with this mission and be part of the conversation please reach out to us at partnerships@devops-research.com

  • Survey: 53 Percent of Organizations Blame Legacy Antivirus Protection for Failed Ransomware Prevention

    SentinelOne Survey Highlights the Risks of Paying Ransomware; Organizations’ Adoption of Next-Gen Endpoint Protection to Improve Confidence in Repelling Attacks

    Mountain View, Calif. – March 27, 2018 – According to the SentinelOne Global Ransomware Report 2018, more than half (53 percent) of U.S. organizations that were infected with ransomware blamed legacy antivirus protection for failing to prevent the attack. Nearly 7 out of 10 of these companies have replaced legacy AV with next-gen endpoint protection to prevent future ransomware infections. This distrust in legacy AV further confirms the required shift to next-gen endpoint protection in defending against today’s most prominent information security threats.

    AV Fails to Foil Ransomware

    Behind employee carelessness as the primary cause (56 percent blamed this), failed legacy AV protection is viewed as the leading factor in successful ransomware attacks, followed by un-timely responses (33 percent). Legacy vendors have failed to build solutions for new vectors – specifically, many legacy AVs still lack basic anti-exploit capabilities. In addition to naming the most common reasons for successful attacks, respondents indicated their level of confidence in future defense with advanced technology:

    • Ninety six percent of respondents who were infected with ransomware are confident they can prevent future attacks.
    • Sixty eight percent of confident respondents state this is because they replaced legacy AV with next-gen endpoint protection.

    Cost of Ransomware: Negotiation Leads to More Attacks

    The survey provides strong evidence that while ransomware attacks are on the rise, an organization should never pay the ransom in an attack due to the frequency of subsequent attacks, and infrequency of being able to unlock encrypted files:

    • Forty five percent of U.S. companies hit with a ransomware attack last year paid at least one ransom; but only 26 percent of these companies had their files unlocked.
    • U.S. organizations that paid the ransoms we’re targeted and attacked again with ransomware 73 percent of the time.

    Interestingly, 44 percent of respondents claim that employees have paid a ransom without the involvement or sanction of IT/security teams. The U.S. is also, on average, paying higher ransoms than any region worldwide and spending more hours responding to infections:

    • The average value of ransoms paid by U.S. companies was $57,088 (global average is $49,060);
    • The average estimated business cost as a result of a ransomware attack – including ransom, work-loss and time spent responding, is more than $900,000;
    • The average number of employee hours dedicated to responding to ransomware infection: 44 hours (global average: 40 hours).

    Ransomware Impact Felt by Partners and Supply Chain

    Research also shows the significant negative impact ransomware attacks have on third-party suppliers and partners of organizations suffering an infection, magnifying the detriment attacks have on the U.S. business community as a whole:

    • Forty six percent claim third-party suppliers and partners suffered downtime;
    • Thirty five percent claim third-party suppliers and partners suffered loss of productivity;
    • Twenty percent claim third-party suppliers and partners suffered loss of revenue.

    “Attackers are continually refining ransomware attacks to bypass legacy AV and to trick unwitting employees into infecting their organization. Paying the ransom isn’t a solution either – attackers are treating paying companies like an ATM, repeating attacks once payment is made,” said Raj Rajamani, SentinelOne VP of Products. “The organizations with the most confidence in stopping ransomware attacks have taken a proactive approach and replaced legacy AV systems with next-gen endpoint protection. By autonomously monitoring for attack behaviors in real-time, organizations can detect and automatically stop attacks before they take hold.”

    About SentinelOne

    SentinelOne delivers autonomous endpoint protection through a single agent that successfully prevents, detects and responds to attacks across all major vectors. Designed for extreme ease of use, the S1 platform saves customers time by applying AI to automatically eliminate threats in real time for both on premise and cloud environments and is the only solution to provide full visibility across networks directly from the endpoint. To learn more visit sentinelone.com or follow us at @SentinelOne, on LinkedIn or Facebook.

    Contact:

    Jake Schuster

    fama PR for SentinelOne

    E: S1@famapr.com

    P: 1.617.986.5021

  • JFrog democratizes DevOps for C and C++ communities, with free Conan support in Artifactory

    JFrog announces free Artifactory Community Edition to help accelerate the DevOps revolution by bringing the most reliable software repository to C/C++ community

    SUNNYVALE, California, March 28, 2018 – JFrog, the DevOps accelerator, announces that JFrog Artifactory, the company’s universal software repository, now offers a free community edition that serves the C and C++ communities via the Conan package manager. The new enterprise-class offering is the first repository available to the C and C++ communities that manages packages at scale for free.

    Every enterprise company has a C and C++ legacy, yet until today, this investment was not DevOps ready. C and C++ languages are used by millions of programmers with billions of lines of code utilizing the languages. The code has been used to build every type of application from embedded systems to IoT solutions. Using a C/C++ artifact repository is necessary to automate C and C++ code and apply continuous integration in the DevOps flow.

    Conan, the leading open source packaging manager among the C and C++ communities, provides a model that reduces the binary compatibility problem while simultaneously supporting all major systems. Conan helps C and C++ developers to build applications and automate their C++ dependencies across platforms. C++ developers are already using Conan in production, and JFrog Bintray for universal binaries distribution. As part of its community approach, JFrog is embracing the world’s C and C++ communities, empowering millions of developers with a free community version of Artifactory that offers Conan support in order to help continuously and automatically release binaries.

    “Artifactory Community Edition for C and C++ is a huge step forward for Conan users. From now on, they can easily host private Conan repositories in-house, enjoying the user interface, the advanced permissions and authentication, and increased scalability. And all for free,” said Conan Co-founder, Diego Rodriguez-Losada. “This is the ultimate resource to democratize DevOps for C and C++ developers around the world, accelerating software delivery in a scalable manner taking another step closer to liquid software.”

    This year at swampUP, the JFrog annual user conference, JFrog will have a special focus on Conan and C++ development including a full-day training session, dedicated Conan track, and ample opportunity to engage with Conan founders and community thought leaders. swampUP will be held in Napa Valley, on May 16th-18th, 2018. Tickets are now available online at https://swampup.jfrog.com.

    To learn more about the technical details of this release visit JFrog’s blog.

     

    About

    With more than 4,000 customers and over 2 billion downloads per month on its universal binaries hub, JFrog is the leading universal solution for the management and distribution of software binaries. JFrog’s four products, JFrog Artifactory, the Universal Artifact Repository; JFrog Bintray, the Universal Distribution Platform; JFrog Mission Control, for Universal DevOps Flow Management; and JFrog Xray, Universal Component Analyzer, are used by Dev and DevOps engineers worldwide and are available as open-source, on-premise, and SaaS cloud solutions. Customers include some of the world’s top brands, such as Amazon, Google, Facebook, Uber, Netflix, Twitter, Adobe, VMware, Slack, and Spotify. The company is privately held and operated from California, Seattle, Israel, India, Spain, China, and France. More information can be found at jfrog.com.

    Leadership

    Shlomi Ben Haim – Co-Founder and CEO
    Yoav Landman – Co-Founder and CTO
    Fred Simon – Co-Founder and Chief Architect

    Media Contact

    Lauren Perry

    Lauren@blonde20.com

    +1-617-686-5924

  • Survey: Balancing Technical and Team-Building Skills Are Key Attributes for an Effective Site Reliability Engineer (SRE)

    Catchpoint Survey of 400+ SREs Highlights Evolving Role, Need for Strong Collaboration, plus Laser Focus on Availability and Automation

    Catchpoint is a Silver Sponsor of SREcon18 Americas, Santa Clara, CA, March 27-29

    NEW YORK–(BUSINESS WIRE)–Catchpoint™, the digital experience monitoring (DEM) expert, today released findings of a global survey of site reliability engineers (SRE) which found this relatively new IT position is best served by those with a mix of technical and non-technical skills, particularly team building centered on problem solving.

    “We find ourselves working more and more with SREs because that role so clearly aligns with Catchpoint’s customer-centric mission: to help organizations deliver exceptional digital experiences and to optimize IT performance. The SRE role will keep expanding with AIOPs and Observability requirements in the very near future.”

    Tweet this

    LinkedIn currently features over 1,000 job listings for SREs, but there is often confusion regarding exactly what this position entails. The survey of 416 professionals with the title or responsibility of an SRE was conducted by Catchpoint in January and February of 2018 with the goal of creating a current, real-world profile of an SRE: What is their role? What skills are required? How is their time spent? Core survey findings include:

    • Problem-solving, teamwork, composure under pressure, and strong written or verbal skills regarding incident resolution, are needed to be an effective SRE;
    • 65 percent of SREs are deploying code at least once a day, and almost half (47 percent) report deploying new code multiple times per day;
    • Automation was flagged as the most important technical skill for an SRE;
    • Availability is the most important service indicator, with alerting and notification solutions topping the list of must-have tools;
    • SREs both write code and support existing systems, yet most SREs report to software engineering as opposed to IT operations; this is surprising since a larger proportion of SREs have an IT operations background.

    The full survey report is available here: http://pages.catchpoint.com/2018-SRE-Report.html

    “The SRE role is still evolving. We found that some SREs are very happy with their position, but others are struggling to explain their role within the organization,” comments Dawn Parzych, director of product and solutions marketing at Catchpoint. “We also found that SREs are present in companies of all sizes and hail from a variety of backgrounds, and the ideal SRE doesn’t need to be a generalist.”

    More Room for Automation: While 92 percent of respondents listed automation as the top technical skill required of an SRE, only 18 percent said their teams have automated every aspect of their operation, indicating that additional machine-automated practices in monitoring, testing or other disciplines are needed. The 90 percent who said they cannot live without alerting and notification tools is consistent with the finding that availability is the most important service indicator.

    Google established the formal position of SRE in an attempt to bring stability to its fast-moving production needs. Site reliability engineering comprises aspects of software development and IT operations, with responsibility for protecting and progressing both. The SRE is often the single point of responsibility and arbiter between the Dev and Ops teams, with the end-goal of ensuring reliable, low latency applications even in a continuous delivery environment.

    While an organization’s need for SREs was evident throughout the survey’s findings, the cultural shifts were noted as a concern. One SRE commented, “Moving from traditional ops to SRE can be a challenging cultural change – both for the engineers’ changing role, and the wider teams and departments they sit in. We are still working through that transition and have found measurable attributes the best for evidencing why SRE is a more efficient and effective methodology than traditional IT ops.”

    “Site reliability engineering was inevitable in an era of complex infrastructures where always-available and speed is paramount. SREs will continue playing a huge role in any organization’s success,” comments Mehdi Daoudi, CEO and co-founder of Catchpoint. “We find ourselves working more and more with SREs because that role so clearly aligns with Catchpoint’s customer-centric mission: to help organizations deliver exceptional digital experiences and to optimize IT performance. The SRE role will keep expanding with AIOPs and Observability requirements in the very near future.”

    About Catchpoint

    Catchpoint is revolutionizing end-user experience monitoring to help companies deliver amazing digital experiences. Our platform provides complete visibility into your users’ experiences from anywhere – and real-time intelligence into your applications and services to detect and fix issues faster. We are proud to partner with digital innovators like Google, L’Oréal, Verizon, Oracle, LinkedIn, Honeywell, Priceline, and Qualtrics, who trust Catchpoint to improve their brand experience and drive their business success. See how Catchpoint can reduce your Mean Time to Detect at www.catchpoint.com/freetrial.

    Contacts

    The Medialink Group for Catchpoint
    Kristina LeBlanc, 508-930-5636
    kristinawleblanc@gmail.com
    or
    Frank Cioffi, 415-893-1570
    frankc@medialinkgroup.com

  • SmartBear Is Only Vendor Scored In Top 4 Product Scores For All 5 Use Cases In Gartner’s Critical Capabilities For Software Test Automation

    SmartBear Recognized in Capabilities in Continuous Testing, Open Source-Based Testing Acceleration, Progressive Web Apps/Responsive Web/Native Apps, API/Web Service Testing, and End-to-End Testing Use Cases

    SOMERVILLE, Mass. — March 26, 2018 —SmartBear, the leader in software quality tools for teams, is the only vendor that scored in the top four product scores forall five use cases in Gartner’s 2018 Critical Capabilities for Software Test Automation[1]. Gartner, the world’s leading information technology research and advisory company, analyzed 10 vendors in the use case areas of Continuous Testing, Open Source-Based Testing Acceleration, Progressive Web Apps/Native Apps/Responsive Web, API/Web Service Testing, and End-to-End Testing. SmartBear believes that this recognizes the long-standing commitment SmartBear has made to provide test automation tools that are robust, yet easy to try, implement and use by software quality teams with any level of testing experience, technical expertise, and on any platform.

     

    “TestComplete has allowed O’Reilly to easily convert thousands of manual tests to automated tests, seamlessly integrating into our testing ecosystem,” said Carson Underwood, QA Automation Supervisor at O’Reilly Auto Parts. “TestComplete has allowed my team to scale our automation efforts and make sure we’re releasing a high quality product to all of our customers while greatly decreasing our testing cycle.”

    SmartBear is listed in the Critical Capabilities report with the following other providers: CA Technologies, Tricentis, Microsoft, IBM, TestPlant, Parasoft, Micro Focus’ Unified Functional Testing, Micro Focus’ (Silk Test), and Ranorex. Aside from in-product benefits, working with SmartBear brings advantages such as designated customer success reps, access to an active community with responses within 60 minutes of a post, and free training and support.

    “SmartBear products make automating UI and API tests fast and easy across desktop, web, mobile, API, IoT, and more,” said Ryan Lloyd, VP of Products, Test and Development at SmartBear. “Our active community, superior customer support, and onboarding experience allow teams to get up-and-running quickly. Together, our portfolio of products and customer service allows customers to realize rapid time to value in an environment where there is ever-increasing pressure to deliver high quality software, faster.”

    SmartBear continues to deliver strong customer success and expand the portfolio of software test automation tools.

    [1] Gartner, Critical Capabilities for Software Test Automation, by Joachim Herschmann, Thomas E. Murphy, Jim Scheibmeir, February 5, 2018.

    Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner’s research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.

    Tweet this article.

    About SmartBear Software

    Supporting more than six million software professionals and over 22,000 companies in 194 countries, SmartBear is the leader in software quality tools for teams. The company’s products help deliver the highest quality and best performing software possible while helping teams ship code at nearly impossible velocities. With products for API testing, UI testing, code review and performance monitoring across mobile, web and desktop applications, SmartBear equips every development, testing and operations team member with the tools to ensure quality at every stage of the software cycle. For more information, visit: http://smartbear.com, or for the SmartBear community, go to: LinkedIn, Twitter or Facebook.

  • GitLab Brings Industry-Leading Continuous Integration and Deployment to GitHub Community

    Integration of GitLab CI/CD for GitHub simplifies and fuels DevOps transformation for the enterprise

     

    SAN FRANCISCO, CALIF March 22, 2018 — GitLab, the only software that supports the entire DevOps lifecycle in a single application, today announced that businesses and open source projects can now use GitLab’s best-in-class CI/CD together with GitHub and GitHub Enterprise code repositories. With GitLab CI/CD for GitHub, enterprises working with multiple different types of code repositories can now standardize on GitLab CI/CD for seamless consistency across both their GitHub and GitLab code repositories. Open source projects that host their code on GitHub can take advantage of CI/CD on GitLab.com, where GitLab offers top tier features for free to open source projects.

     

    Enterprises recognize that adopting DevOps practices including continuous integration, continuous delivery, and continuous deployment allows them to deliver software faster, while maintaining high quality. However, large enterprises with complex organizational structures struggle to make this a reality and end up with multiple teams utilizing a variety of tools. This disparate toolset leads to silos, with teams stuck in their own implementation unable to collaborate broadly, ultimately slowing progress. A single CI/CD tool that can test and deliver software from multiple different code repositories allows enterprises to standardize and fully optimize their DevOps pipelines.

     

    “Continuous integration and deployment form the backbone of modern DevOps,” said Sid Sijbrandij, CEO and co-founder of GitLab. “With this new offering, businesses and open source projects that use GitHub as a code repository will have access to GitLab’s industry leading CI/CD capabilities.”

     

    With the new GitHub integration, GitLab users can now create a CI/CD project in GitLab connected to an external GitHub code repository. This will automatically prompt GitLab CI/CD to run whenever code is pushed to GitHub and post CI/CD results back to GitHub when completed. This news comes on the heels of GitLab’s acquisition of security testing software Gemnasium in January, and will allow Gemnasium customers that were using GitHub + Gemnasium to begin using GitLab CI/CD for their security needs without needing to migrate their code.

     

    GitLab was recently recognized as a leader in Continuous Integration in The Forrester Wave™: Continuous Integration Tools, Q3 2017 report. As the report states, “GitLab delivers ease of use, scalability, integration, and innovation.” This research finding is further bolstered by the release of GitLab CI/CD for GitHub.

     

    To launch the feature, GitLab CI/CD for GitHub will be available to GitLab.com users free of charge through March 22, 2019. More information and full pricing details can be found on the GitLab CI/CD for GitHub page.

     

    About GitLab

    GitLab is the first single application specifically built from the ground up for all stages of the DevOps lifecycle for Product, Development, QA, Security, and Operations teams to work concurrently on the same project. GitLab provides teams a single data store, one user interface, and one permission model across the DevOps lifecycle allowing teams to collaborate and work on a project from a single conversation, significantly reducing cycle time and focus exclusively on building great software quickly. Built on Open Source, GitLab leverages the community contributions of thousands of developers and millions of users to continuously deliver new DevOps innovations. More than 100,000 organizations from startups to global enterprise organizations, including Ticketmaster, ING, NASDAQ, Alibaba, Sony, and Intel trust GitLab to deliver great software at new speeds.

     

  • Compuware: Survey Shows Critical Mainframe Workloads Increasing While Mainframe Staff Losses Remain Unfilled

    Many Organizations Not Measuring, Prioritizing Vital Key Performance Indicators

    • 57 percent of enterprises with a mainframe currently run more than half of their business-critical applications on the platform-with that number expected to increase to 64 percent by next year.
    • 72 percent of customer-facing applications are completely or very dependent on mainframe processing.
    • Enterprises have only replaced 37 percent of the mainframe workforce lost over the past five years.
    • Many organizations surveyed are not currently measuring velocity or efficiency key performance indicators, putting them at a disadvantage in the digital age.

    DETROIT, March 22, 2018 (GLOBE NEWSWIRE) — The mainframe is becoming more important to large enterprises, with the percentage of organizations running at least half their business-critical applications on that platform expected to increase next year. However, the loss of skilled mainframe staff, and the failure to subsequently fill these positions, pose significant threats to application quality, velocity and efficiency.

    These are among the findings of research and analysis conducted by Forrester Consulting on behalf of Compuware.  According to the study, “As mainframe workload increases-driven by modern analytics, blockchain and more mobile activity hitting the platform-customer-obsessed companies should seek to modernize application delivery and remove roadblocks to innovation.”

    The survey of mainframe decision-makers and developers in the U.S. and Europe also revealed:

    • Growing mainframe importance

    o   64 percent of enterprises surveyed will run more than half of their critical applications on the platform within the next year, up from 57 percent this year.

    o   72 percent of customer-facing applications at these enterprises are completely or very reliant on mainframe processing.

    • Loss of essential mainframe staff

    o   Enterprises have lost an average 23 percent of specialized mainframe staff in the last five years.

    o   63 percent of those positions have not been filled.

    • Failure to prioritize velocity and efficiency

    o   While 55 percent of respondents cite application quality as “extremely important,” only 42 percent put the same emphasis on development velocity and 46 percent on efficiency.

    • Failure to measure critical KPIs

    o   While firms recognize the importance of quality, velocity and efficiency, significant percentages are not measuring them (Quality: 27 percent, Velocity: 38 percent, and Efficiency: 39 percent).

    • Customer experience disconnect

    o   59 percent say that improvements in quality, velocity and efficiency mean a better customer experience; yet only 31 percent see this focus actually decreasing customer-discovered defects.

    These findings and others suggest that mainframe investments, culture and management practices need to evolve significantly in light of changing market realities. Insufficient emphasis on velocity, for example, is a holdover from an earlier era that predates the demands of today’s fast-paced digital economy. Inadequate attention to efficiency likewise reflects an era when the mainframe development and quality assurance staffs were significantly larger and extraordinarily stable.

    According to the Forrester study, “Mainframe is alive and growing at the heart of many businesses. IT decision makers cannot afford to treat their mainframe applications as static environments bound by long release cycles, nor can they fail to respond to their critical dependence on a retiring workforce. Instead, firms must implement the modern tools necessary to accelerate not only the quality, but the speed and efficiency, of their mainframe, as well as draw skilled people to work on the platform.”

    The complete Forrester Opportunity Snapshot study, entitled “Modern Mainframe KPIs Are Key To A Successful Digital Strategy,” can be found here.

    “Many enterprise CIOs are clearly facing a do-or-die moment when it comes to the mainframe,” said Chris O’Malley, CEO of Compuware. “They must quickly re-think, re-design and re-tool their approach to mainframe DevOps or face a future where they are simply too slow and inflexible to keep pace with their more nimble competitors.”

    Compuware Corporation

    Compuware empowers the world’s largest companies to excel in the digital economy by fully leveraging their high-value mainframe investments. We do this by delivering highly innovative solutions that uniquely enable IT professionals with mainstream skills to manage mainframe applications, data, and platform operations. Learn more at compuware.com.

  • Securonix Expands Field Operations and Strengthens Sales Team with Industry Veterans

    Security Analytics Leader Responds to Increasing Demand with Expanded Sales Team

    ADDISON, Texas, March 21, 2018 (GLOBE NEWSWIRE) — Securonix, the market leader in big data security analytics and user and entity behavior analytics, further expanded its team of sales veterans today with the announcement of one key promotion and three new executive hires.

    “Securonix is attracting the best in the cybersecurity business,” said Securonix CEO Sachin Nayyar. “We’re innovating new capabilities that are revolutionizing security, redefining what can be done with big data analytics and inventing new machine learning capabilities that solve critical security problems. People want to join our movement. Frankly, we can’t grow fast enough.”

    Chris Ostertag has taken on broader responsibility at Securonix, leading business development and pre-sales as part of an overall integrated field operations and revenue generation strategy. Chris joined Securonix in 2016 as Senior Vice President of Worldwide Sales and has a track record for building sales teams at multiple high-growth startups including Skipjaq (machine learning for website performance), AlertEnterprise (identity access management), and SailPoint Technologies (identity and access management).

    Andrew Vallila joins Securonix as Vice President of Sales for the North America. Andrew is an industry veteran who has led solution-oriented sales teams to revenue growth and customer success, including roles at One Identity (identity and access management), Oracle, and Sun Microsystems.

    Jim Burroughs joins Securonix as Vice President of Mid-Market Sales. Jim specializes in successfully building and leading sales organizations for growth-oriented software companies and has a proven track record in both enterprise and mid-market sales management positions. He has spent most of his career building highly successful startup companies including Stackify, Nolio (acquired by CA Technologies), and Onaro (acquired by NetApp).

    Robert Ramsden-Board joins Securonix as Vice President for EMEA. Securonix has seen 400 percent year-over-year growth internationally and will add fuel to the fire with this key addition to the international team. Robert joins Securonix from Splunk and specializes in disrupting the conventional ways people look at and use data. Prior to Splunk, Robert spent several years with Symantec growing their EMEA business.

    In the last few months Securonix has been recognized by major analyst firms for its cutting-edge security solutions, industry leadership, and maturity in the security analytics space. Gartner added Securonix to the 2017 Gartner Magic Quadrant for Security Information and Event Management, bypassing the niche quadrant and placing Securonix as a visionary. Gartner also gave Securonix its highest ranking for User and Entity Behavior Analytics (UEBA). Forrester named Securonix a “strong performer” in its 2017 Forrester Wave for Security Analytics Report. With these additions to the team, Securonix will be able to continue to rapidly increase growth and help SOC analysts and incident response teams fight hackers with cutting edge cybersecurity solutions.

    About Securonix

    Securonix, the leader in Security Analytics, uses the power of Hadoop and machine learning technology to radically transform enterprise security with actionable intelligence. Our purpose-built UEBA and next-gen SIEM platforms consume, enrich and analyze massive volumes of data in real-time to detect and prioritize the highest risk threats to organizations. Using out of the box content, Securonix detects insider threat, cyber threat, cloud and fraud attacks automatically and accurately. Visit us at https://www.securonix.com.